Avast fined 16.5 M$ by the FTC for reselling data

In a decision that is shaking up the world of cybersecurity, Avast, the renowned security solutions provider, has been forced to pay $16.5 million to the US Federal Trade Commission (FTC). The reason: the illegal sale of its users' browsing data for advertising purposes.

Already under fire for reselling sensitive information, including browsing history, unique user IDs, and other collected data, Avast is now facing a major financial penalty. The FTC said the company acted unfairly by collecting consumer browsing information through its browser extensions and antivirus software, storing it indefinitely, and selling it without proper consent or adequate notice.

But the accusation doesn't stop there. The FTC also accused Avast of misleading its users by claiming to protect their privacy by blocking third-party tracking. However, the reality was quite different, as Avast failed to properly inform users that it would be selling their detailed and identifiable browsing data. The commission alleges that more than 100 third parties purchased this data via Avast's subsidiary, Jumpshot.

In response, an Avast spokesperson confirmed that an agreement had been reached with the FTC to resolve the investigation. While the group disputes the allegations and characterisation of the facts, it says it is committed to its mission to protect people's digital lives. The voluntary closure of Jumpshot in January 2020 is part of this agreement. Avast says it is pleased to resolve this matter while looking to the future to continue serving its millions of customers around the world. However, this case highlights the growing need for full transparency and rigorous privacy protection in today's digital landscape.